Privacy policy

Last updated: 11 October 2026

This is an English translation provided for convenience. The Spanish version is the legally binding text; in case of any discrepancy the Spanish original prevails.

1. Data controller

Company: Ailon-Glandt Consulting, S.L.
Tax ID (NIF): B22676894
Registered office: Calle de Arturo Soria 154, 28043 Madrid, Spain
Companies Register: Registro Mercantil de Madrid, Hoja M-857886
Email: [email protected]
Website: ailon-glandt.com

2. What data we hold

This website has no forms and collects nothing by itself. We only process the personal data you choose to send us by email: usually your name, your email address, your company details and whatever you write in your message.

3. Why, and on what legal basis

Answering your enquiry and corresponding about work — performance of a contract or pre-contractual steps taken at your request (art. 6.1.b GDPR).
Managing the client relationship and meeting legal obligations — accounting, tax and invoicing — if an engagement goes ahead (arts. 6.1.b and 6.1.c GDPR).

We don't send marketing to people who haven't asked for it, don't build profiles and don't make automated decisions about people.

4. How long we keep it

Correspondence that doesn't lead to an engagement is kept as long as needed to deal with it, and at most one year from the last contact. Data tied to a contractual relationship is kept for its duration and afterwards for the applicable limitation periods — generally six years for accounting records and four for tax.

5. Who else is involved

We don't share data with third parties except where the law requires it. These providers act as processors on our instructions under art. 28 GDPR:

Cloudflare, Inc. — DNS, site protection and inbound mail routing for the domain.
Google Ireland Ltd. / Google LLC — the email service used for correspondence.
Hetzner Online GmbH (Germany) — hosting for this website.

Hosting sits inside the European Economic Area, so it involves no international transfer. Cloudflare and Google are US-headquartered: to the extent they process data outside the EEA, those transfers rely on the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework adequacy decision, depending on the provider.

6. Your rights

You can ask for access, rectification, erasure, restriction, objection and portability by writing to [email protected], saying which right you are exercising. We'll respond within one month.

If you think we haven't handled your request properly, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es).

7. Security

The site is served over HTTPS only. We apply reasonable technical and organisational measures, including restricted access to mailboxes and encryption of system credentials.

8. Children

This site is aimed at professionals and businesses. We don't knowingly collect data about children.